Kevin Morris ec632a7091 use secure=True when options.disable_http_login is enabled ... We'll piggyback off of the current existing configuration item, `disable_http_login`, to decide how we should submit cookies to an HTTP response. Previously, in `sso.py`, the http schema was used to make this decision. There is an issue with that, however: We cannot actually test properly if we depend on the https schema. This change allows us to toggle `disable_http_login` to modify the behavior of cookies sent with an http response to be secure. We test this behavior in test/test_auth_routes.py#L81: `test_secure_login(mock)`. Signed-off-by: Kevin Morris <kevr@0cost.org>		2021-06-22 20:33:19 -07:00
..
git	remove unused imports, rectify isort violations	2021-06-05 21:27:39 -07:00
models	add Base.as_dict() and Base.json()	2021-06-13 10:48:31 -07:00
routers	use secure=True when options.disable_http_login is enabled	2021-06-22 20:33:19 -07:00
scripts	aurweb: Globalize a Translator instance, add more utility	2021-06-05 19:49:42 -07:00
testing	setup_test_db: remove mysql-dependent coverage path	2021-06-19 09:09:12 -07:00
__init__.py	Use setuptools to install Python modules	2016-09-29 22:07:06 +02:00
asgi.py	bugfix: relax next verification	2021-06-05 20:11:17 -07:00
auth.py	auth_required: allow formattable template tuples	2021-06-21 21:37:10 -07:00
captcha.py	fastapi: Jinja contextfilter renamed to pass_context	2021-06-05 20:11:17 -07:00
config.py	Add support for configuring database with port instead of socket	2021-06-05 20:11:17 -07:00
db.py	aurweb.db: add commit(), add() and autocommit arg	2021-06-19 09:08:09 -07:00
exceptions.py	git-serve: check update hook permissions	2019-11-23 11:18:16 -05:00
initdb.py	use mysql backend in config.dev	2021-06-05 20:17:48 -07:00
l10n.py	fastapi: Jinja contextfilter renamed to pass_context	2021-06-05 20:11:17 -07:00
schema.py	aurweb.schema: Fix off-by-one String impls of DECIMAL	2021-06-11 19:57:52 -07:00
spawn.py	swap uvicorn out for hypercorn	2021-05-10 23:22:00 -04:00
templates.py	use secure=True when options.disable_http_login is enabled	2021-06-22 20:33:19 -07:00
time.py	add aurweb.time module	2021-06-05 20:11:17 -07:00
util.py	use secure=True when options.disable_http_login is enabled	2021-06-22 20:33:19 -07:00